The grunttask is for synchronising roles, role_entiteies and values. Values will be synchronized automatically if your define it in your openrecord model. (see: OpenRecord Plugin/Value Sync).
The OpenRecord plugin enhances your model definition to also support permissions. Permissions will be applied to find, create, update and destroy.
The actionhero plugin handles the OAuth2 handshake, user and sessions management, communication with other identity apps ans some more.

after installing identity your config folder should contain a identity.js config file.
Every identity client has an id and secret to authenticate the application.
Additionally every application has multiple roles, entities and values.
An identity user can have multiple roles and every role could have multiple entities attached to it.
set simplifyAdminRole to true, to combine the admin and application_admin role into admin.

Now you could grant User X permissions to Project A and B via the admin web interface of identity.

be sure to enable the plugin within actionhero (config/api.js)

you will need to add the identity package (npm install identity --save) to your package.json